3 results · Clear filters · Feed
-
Medium 5.3
lm-sys fastchat Arena Side-by-Side View add_text control flow
A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now publi…
-
Medium 5.3
lm-sys fastchat Worker API Endpoint api_generate resource consumption
A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit ha…
-
Medium 6.1CVE-2024-10908 Scanner template
Open Redirect in lm-sys/fastchat
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential th…